pnpm audit failure blocks all deploys after npm retires API endpoint

A frontend deploy pipeline failed because npm retired the API endpoint that pnpm audit relies on, causing a hard error instead of a vulnerability report. The author argues that a security gate that fails due to infrastructure issues is worse than no gate at all. They recommend using local lockfile scanners like osv-scanner instead of depending on a vendor's legacy API.